Chapter 4
Configuring High Availability (HA)
11.
12.
13.
14.
15.
Upgrading an Existing Failover Pair
For instructions on upgrading an existing failover pair to a new Cisco NAC Appliance release, see
"Upgrading High Availability Pairs" in the
your latest Cisco NAC Appliance release version.
OL-20326-01
Change the following as needed:
Trusted-side Service IP Address
–
Untrusted-side Service IP Address
–
[Secondary] Peer Host Name
–
[Secondary] Peer MAC Address (trusted-side interface)
–
[Secondary] Peer MAC Address (untrusted-side interface)
–
[Secondary] Heartbeat IP Address
–
Click the Update button, then the Reboot button.
From the Clean Access Manager administrator web console, go to Device Management > CCA
Servers and wait for the secondary Clean Access Server to become active. (Note that this can take
a few minutes.) The active CAS of a high-availability pair is displayed in brackets next to the Service
IP for the pair, as shown in
appear in brackets in the List of Servers with a status of Connected.
Once the IP address of the secondary CAS appears in brackets in the List of Servers, and the CAS
has a status of Connected, repeat steps 1-11 for the secondary CAS.
Once changes are made and the secondary CAS is rebooted, the primary CAS will appear as the
active server on the List of Servers and displays all the new IP information.
Installing a Clean Access Server High Availability Pair
Figure 4-9 on page
4-20. The IP address of the secondary CAS should
Release Notes for Cisco NAC Appliance
Cisco NAC Appliance Hardware Installation Guide
corresponding to
4-41